Recently I’ve had to tweak our Windows 8.1 Group Policy following the deployment of some Surface Pro’s. I noticed that a few people were attempting to link their personal Microsoft Accounts with these devices, in addition to this we had a call from someone who had uninstalled the modern Camera Modern App (somehow). I’ve stripped pretty much all of the modern apps out of our corporate image but this one was left installed for obvious reasons. Someone else had also reported that they had a weird Internet Explorer browser, looking at this they had done a search in the new interface which returned Bing Internet search results, these opened up in the modern Internet Explorer App and not the desktop version even though I have a policy configured to load the desktop version.
I already have the Windows Store turned off with Group Policy.
These are the new policies I’ve adjusted with some screen shots of the corresponding results:
1. Prevent Users from uninstalling modern applications from the Start menu
User Configuration\Policies\Administrative Templates\Start Menu and Task Bar\Prevent Users from uninstalling applications from Start (Enabled)
2. Prevent Internet Search Results from showing
Computer Configuration\Policies\Administrative Templates\Windows Components\Search\Don’t search the web or display web results in Search (Enabled)
3. Block Microsoft Accounts from being used
Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\Users can’t add or log on with Microsoft accounts
I’m using a WMI filter to target the Group Policy at Windows 8.1 Operating Systems only.